It's one thing to have a defect. It's another to use it against someone, especially is that dev met the requirements.